Cyber Security Manager

Role Overview

Cyber Security Manager at Emirates Flight Catering, reporting to the Senior Manager – Cyber Security. This is a UAE National position based with the Information Technology team.

Role Purpose

Lead key areas of the cybersecurity agenda to protect the IT environment, strengthen security posture, and support the resilience of a complex and evolving technology landscape. Work closely with IT teams, business stakeholders, and external security partners.

Key Responsibilities

Incident Management & Response

• Lead investigation and root cause analysis of cybersecurity incidents.
• Ensure effective corrective and preventive actions are implemented.
• Partner with the Security Operations Centre and third-party providers to identify, respond to and remediate security incidents.

Risk & Compliance Management

• Manage cybersecurity risks and support the business in maintaining appropriate security controls.
• Conduct and oversee vulnerability assessments, penetration testing, technical risk assessments and compliance reviews.
• Drive compliance with information security policies, cybersecurity standards and relevant regulatory requirements.
• Work closely with Internal Audit and key stakeholders on IT risk identification, mitigation and closure.

Monitoring & Reporting

• Monitor cybersecurity KPIs, risks and remediation activities.
• Provide clear visibility to management on cybersecurity status and activities.

Security Culture & Leadership

• Lead cybersecurity awareness initiatives to strengthen security culture across the organisation.
• Provide leadership and direction to the Cyber Security team.

Qualifications & Experience

• Bachelor's degree in Computer Science or equivalent discipline.
• Minimum 7 years' IT experience, including extensive experience in IT Security.
• At least 4 years specifically within IT Security, covering areas such as Cybersecurity, IT Risk and IT Audit.
• Experience working within a complex, hybrid IT environment, including on-premises and cloud infrastructure.

Skills & Competencies

• Strong knowledge of cybersecurity frameworks and controls, including ISO 27001, CIS Critical Security Controls and NESA.
• Experience with Vulnerability Assessment and Penetration Testing (VAPT) and Governance, Risk and Compliance (GRC) methodologies.
• Cybersecurity/IT Security/Risk certifications such as CISSP, CISM, CISA, GIAC, CEH or CRISC.
• Strong analytical and problem-solving capabilities.
• Strong stakeholder management and leadership capabilities.

Additional Information

• Eligibility: UAE Nationals only. This position is exclusively open to UAE National candidates.